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The Claims 

The following is a listing of the claims, which are presented in accordance with revised 
37 C.F.R. §1-121. 

1 . (Currently amended) A method for providing accessibility ro a plurality of 
remote service providers across a network via a single login to a host service provider, each of 
the plurality of remote service providers being accessible through the host service provider and 
each of the plurality of remote service providers having separate login procedures requiring data, 
the method comprising the steps of: 

the host service provider receiving the single login from a user, the host service provider 
having a universal session manager; 

the universal session manager retrieving data from a validation database based on the 
single login to the host service provider, wherein the data is effective for accessing a selected one 
of the plurality of remote service providers, and wherein the data is based at least in part on the 
single login; 

the universal session manager transmitting said data to the remote service provider, the 
universal session manager and the remote service provider exchanging the data to effect a two- 
sided authentication; and 

the host service provider directing the user to the remote service provider in such manner 
that the user is simultaneously presented with information, in a singJe graphical user interface, 
that is provided by both the host service provider and the remote service providerund, 

.•onnfirT, 0 a f o a rrusre^ Kervi^g p f rwjfrr Wjna ^ertal ncce^ requirement, wherein 
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^ Tn tff r.d <erviee penile acts iT < ™ mTerrriefi^Y heyween The hnst service provider and the 
rp,|<|wi service, provider: and 

wherein The trusted ^rviee mod M |* receives a f*^™\p fiyrp The m^yfl service 

provider. 

wher-ftin The Ttust e^ service rn.yd.jjlfi place* >) jey file on it^ ^.-r's netwnrfr data 
^•t]»isitir>n mod^e: nnd 

where in tairlrexT fi|- .-r>mpr,^ ft q^kie: 

the method further comprising the s jep ftf nepisteri.fm ^e user with the remote service 
provider. . 

2-6. (Canceled) 

7. {Currently amended) A system for providing accessibility to a plurality of 
remote service providers via a single login to a host service provider, each of the plurality of 
remote service providers being accessible through the host service provider and each of the 
plurality of remote service providers having separate login procedures requiring data, the system 
comprising: 

a user system having a network, data acquisition module; 
a plurality of remote service providers; 

a host service provider for receiving the single login, the host service provider having a 

universal session manager; 

the universal session manager receiving data from a validation database based on the 
single login to the host service provider, the universal session manager passing the data, which is 
required for access to the remote service provider, directly to the remote service provider, the 
universal session manager and the remote service provider exchanging the data to effect a two- 
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sided authentication, the two-sided authentication being performed directly between the 
universal session manager and the remote service provider; and 

the validation database for storing the data for accessing the remote service provider, the 
universal session manager communicating with the validation database to obtain the data; and 

wherein the host service provider directs the user to the selected one of the plurality of 
remote service providers using the data; and 

the host service provider directing the user to the remote service provider in such manner 
that the user is simultaneously presented with information, in a single interface, that is provided 
by bom the host service provider and the remote service provider^d 

s^jd v«Hrtar »r»ii ftlffhff WljnT information for registering rhe user with thfi 

n»mrw» j<:ft provider: and 

lhc system further com prising * mi^ed servir-t- fflorhne that serves as an intermediary 
hwunrn |hf P™' fflW 11 '" and a trusirri service provider. 

wherein Sfljri rrusted servj c<> provider ft rgmntfr ^p/jOf provider with T*^* 1 acc eSs 

w^t-p-jn tpc network data acquisition module is an internet hrowsfiL 

wheff Th P "Tl^ ff provider ftinher comp rises a registration module and a login 



module: 

PI QVjdedhV thri remote service: prnyjder: and 

vyfr reir. the rejrj pTration module receives th e- data for registering a asffr with the 

remote service provider: and 

rh.» universal session manager rrtpjstarmg th,? ifsflr with ih? prmotc service provider. 
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8-15. (Canceled) 

16. (Previously presented) The method of claim 1 , wherein ihe two-sided 
authentication is a triple handshake, the triple handshake including: 

the universal session manager sending a usernatne and password to the remote service 
provider constituting a login request; 

the remote service provider sending the universal session manager a reply to the login 

request; and 

the universal session manager directing the user to the remote service provider. 

17. (Previously presented) The method of claim 16, wherein the remote service 
provider is a distinct remote site from the host service provider, and each step of the triple 
handshake is effected directly between the universal session manager and the remote service 
provider. 

18. (Previously presented) The system of claim 7, wherein the two-sided 
authentication is a triple handshake, each step of the triple handshake being performed directly 
between the universal session manager and the remote service provider. 

19. (Currently amended) The method of eiwsHclmmJl, wherein the validation 
database transmits data to the universal session manager of the host service provider indicating 
which services the user is enrolled. 

20. (Previously presented) The method of claim 1 , wherein the host service provider 
receiving the single login from the user is performed over a network. 

2 1 . (Previously presented) The system of claim 7, wherein the validation database 
transmits data to the universal session manager of the host service provider indicating which 
services the user is enrolled. 
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22, (Previously presented) The method of claim U wherein the host service provider 
has control of a navigation bar in the graphical user interface, and web pages from the remote 
service provider are hosted in the graphical user interface and contain a navigation bar. 

23. (Previously presented) The method of claim 1, the information that that is 
provided by the host service provider is adjacent the information that is presented by the remote 
service provider. 

24. (Previously presented) The method of claim 1, further including the host service 
provider presenting the user with information, simultaneously to the remote service provider 
presenting the user with information, both such information being displayed to the user in 
respective areas of the single graphical user interface. 

25, (Previously presented) The method of claim 1 , further including the host service 
provider presenting the user with information in a first area of the single graphical user interface, 
simultaneously with the remote service provider presenting the user with information in a second 
area of the single graphical user interface. 

26, (Previously presented) The method of claim 25. in which: 

the first area of the single graphical user interface is an outer frame of the single 

graphical user interface; and 

the second area of the single graphical user interface is a main bottom panel. 

27. (Previously presented) The method of claim 25, in which: 

ihe first area of the single graphical user interface is an outer frame andjop^ 
navigational bar of the single graphical user interface; and 

the second area of the single graphical user interface is> a main bottom panel and a 
left-hand navigation bar of the single graphical user interface. 
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28. (Previously presented) The method of claim 27, the host service provider 
controlling the first area, and the left-hand navigation bar in the second area providing the user 
with remote service navigation. 

29. (New) A method for providing accessibility to a plurality of remote service 
providers across a network via a single login to a host service provider, each of the plurality of 
remote service providers being accessible through the host service provider and each of the 
plurality of remote service providers having separate login procedures requiring daia, the method 

comprising the steps of: 

the host service provider receiving the single login from a user, the host service provider 

having a universal session manager; 

the universal session manager retrieving data from a validation database based on the 
single login to the host service provider, wherein the data is effective for accessing a selected one 
of the plurality of remote service providers, and wherein the data is based at least in part on the 
single login; 

the universal session manager transmitting said data to the remote service provider, the 
universal session manager and the remote service provider exchanging the data to effect a two- 
sided authentication; and 

the host service provider directing the user to the remote service provider in such manner 
that the user is simultaneously presented with information, in a single graphical user interface, 
that is provided by both the host service provider and the remote service provider; and 

connecting to a trusted service provider having special access requirements, wherein 
a trusted service module acts as an intermediary between the host service provider and the 
trusted service provider, and 
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wherein the trusted service module receives a session© from the trusted service 
provider; 

wherein the trusted service module places a text file on the user's network data 
acquisition module; and 

wherein said text file comprises a cookie; 

the method further comprising the step of registering the user with the remote service 
provider; and 

wherein the two-sided authentication is a triple handshake, the rriple handshake 
including: 

the universal session manager sending a username and password to the remote 
service provider constituting a login request; 

rhe remote service provider sending the universal session manager a reply to the 

login request; and 

the universal session manager directing the user to the remote service provider; 

and 

wherein the remote service provider is a distinct remote site from the host service 
provider, and each step of the triple handshake is effected directly between the universal session 
manager and the remote service provider. 

30. (New) The method of claim 29, further including the universal session manager 
registering the user with die remote service provider. 
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